Background: Clover and First Data (our parent company) have been working with Apple to prepare for the launch of Apple Pay to support developers, merchant acquirers, and issuing banks (see First Data's press release). Clover is enabling all merchants to accept In-App payments, and will be In-Person/NFC enabling all merchants as well (see https://www.clover.com/features/iphone). Here's a bit of how it works from a developer's perspective, and why it matters.

Apple Pay marks the first time a popular operating system is making payments a platform service for real-world, non-digital-good transactions, in a broad, inclusive manner that is compatible with the mainstream payments processing industry. At Clover we're particularly excited because we believe it opens up lightweight apps that can interact and transact with small-and-medium brick-and-mortar restaurants. By lightweight, I mean that these apps won't need to maintain a user database, require user logins, worry about getting cards on file, or being an unwilling payment aggregator. i.e., it will be at least 10x easier. I expect a huge amount of innovation in real-world mobile commerce as a result over the coming years because of the revolution that Apple Pay is starting.

Network-Level Tokenization

"All problems in computer science can be solved by another level of indirection". -- David Wheeler

The first and most important thing to know about is tokenization.

The payment networks (Visa, MasterCard, Amex, etc.) have been very busy building something called tokenization. I call this network-level tokenization to distinguish it from the more familiar forms of tokenization, which is typically performed at either the gateway (such as the Braintree card vault) or the acquiring platform (such as First Data's TransArmor).

E-commerce developers should be quite familiar with the concept of credit card vaults, which take in the PAN and give you back a token to use in its stead. These vaults are typically provided by e-commerce payment gateways, such as Braintree or Stripe, and let you put credit cards on file for your users. I call this gateway-side tokenization. The defining characteristic of these tokens is that they're scoped to a single merchant. They're useful for a developer who wants to keep a credit card on file (to enable low-friction transactions) but without the burden of securing (and associated compliance) of maintaining a database of PANs.

Here's the authorization flow when a gateway-side token is used:

Gateway-side tokenization

The payment networks are proposing something very different: network-side tokenization. These tokens are very different. They are essentially aliases for PANs that are exchanged during an authorization by the network. These tokens are provisioned (see below) into the secure element on the iPhone 6 and used in authorization flows (further protected with 3-D Secure -- see below).

EMV token provisioning is entirely different -- it's between the issuer, the wallet, and the Token Service Provider:

Network-side tokenization

The end result is a token that can be used across merchants and both online (In-App) and offline (NFC, In-Person).

User Logins

After thinking about it a second, you might realize "why do I need my user to create an account with an email address and password at all?" A primary driver (though not only) was to have an account to associate the gateway-side token with. This is no longer strictly necessary: A consumer could simply download an app that connects them with a local merchant, browse the menu, and buy something from their table. This is really important when it comes to apps for small- and medium-sized businesses (local merchants).

Accidental Merchant Aggregators

Many mobile wallets and online-to-offline services have become merchant aggregators, where the company becomes the merchant-of-record for many submerchants.

Say you're an order-ahead app enabling consumers to buy food and pick it up later. You really don't want to be in the payments business, but how else do you collect money from the consumer and to the restaurant? There's so much friction in the system that the typical way is to become the merchant-of-record, which is a position you accept begrudingly. Chargebacks and disputes? It's your problem now.

Network-level tokenization, and iPhone in particular, will radically change this dynamic. Commerce apps won't be forced to become aggregators any longer -- they simply need to use the iOS payment SDKs, and the SDK from the merchant acquirer, to process the payment.

Clover is making this even easier -- all Clover merchants will be enabled for In-App payments, which will give developers instant access to many thousands of merchants through our APIs (for submitting and reading orders, reading and updating menus and retail inventory, receipt printing, etc.). We're selling Clover Station to thousands of merchants a month, enabling developers to reach these merchants through the Clover App Market.

iOS Payments SDKs

Developing an iOS app that uses Apple Pay In-App payments is quite simple. You will use two different APIs:

iOS In-App payments API, for interacting with the user and getting a payment token.

Your merchant acquirer's API, for processing the transaction with said token.

Check out First Data's Payeezy SDK (even more so if you're a Clover developer). In the future all Clover merchants who desire it will automatically be able to accept In-App payments.

3-D Secure

3-D Secure, known commonly as Verified by Visa and MasterCard SecureCode has been largely ignored in the U.S. This is a crude analogy, but 3-D Secure is the e-commerce analog to EMV (which authenticates a cardholder via cryptograms coming from the card). It provides authentication from the issuing bank to use the token that has been provisioned onto the iPhone.

Developers working on iPhone In-App payments don't need to know the details of 3-D Secure when they use Payeezy, but I find it interesting (and you'll find some references to 3-D Secure in the Payeezy SDK).

Here's what a transaction message to a gateway looks like before 3-D Secure (from the Payeezy API docs):

Apple Pay NFC Payments

NFC has been derided for years in the U.S. (though my coworker's 65-year-old mother arrived from Australia a couple days ago complaining bitterly that merchants here can't take tap payments). It's a really great technology that's just been waiting for a tipping point. That point is here.

Apple Pay uses industry-standard EMV contactless protocols over NFC (and MSD contactless for backward compatibility). This makes it compatible with a wide range of contactless payment terminals in deployment today. Clover is NFC-enabling all current and future Clover products.

Yes, the token is issued by the payment network, but Apple is not the payment network. The network would be Visa/MasterCard/AMEX. Apple receives the token from the payment network when the card is stored in Apple Pay (or Passport), then the token is provided each time a payment is made.

at some point during either the setup of the card in passport or the transaction itself, the PAN has to be transmitted to either the association (VISA/MC) and/or the issuer (BoA, Chase, Citibank). The issuer has to know which card account to charge for the transaction.

"first time a popular operating system is making payments a platform service for real-world, non-digital-good transactions, in a broad, inclusive manner that is compatible with the mainstream payments processing industry."

How can you ignore Google Wallet, which I've been using to make secure NFC payments for real world, non-digital-good transactions since 2011? Likewise, what about the unfortunately-named ISIS system by Verizon and others?

A more valuable article would explain the advantage Apple Pay has over these system, such that it'll succeed where they have clearly failed - not ignored their existence completely.

This article does explain the advantage Apple Pay has over other eWallet systems. By utilizing Network-Level Tokenization, Apple has integrated with all gateways, processors, issuers, and acquirers in the current payment scheme by negotiating directly with Visa, MasterCard, AMEX, Bank of America, JP Morgan Chase, Wells Fargo, and the list goes on...

This isn't something that other eWallets have done. Thus, why Apple Pay will be around... and others won't.

I wonder: 1) Will both NFC payments and in-app purchases made via fingerprint be considered card-present transactions for purposes of interchange fees? 2) Can the payment-network's token be submitted for subsequent, recurring payments? i.e. If I purchase a monthly membership and pay for the first month via Apple Pay

1) i read somewhere an article that said Apple negotiated a rebate of the interchange from the issuers for the difference in card present and card not present. If this is true i would assume it would be an interim solution with the associations coming out with a new IRD (interchange rate designator) at some point in the near future.

Currently, NFC will attract CP rates and InApp CNP. However the debate continues so I expect some change there. Yes, the recurring use case is supported ... Probably more pertinent in the InApp context only.

Secure Element will be used in all the cases, be it in-app purchases or store transactions, for generating dynamic cryptogram because the key to generate transaction-specific cryptogram is stored in the secure element.

I would like to understand one thing, which is not clear from the article:

in EMV, transactions are signed by a shared key that is normally stored in the SE of the card, being put there by the card issuer (hopefully) in controlled environment.

Is there SE involved in Apple Pay EMV transations? If the answer is yes, then the key needs to be stored in the SE "in the field", by the software running on the device. How the transfer of the key from the issuer to the SE in the device protected from eavesdropping?

If the answer is no, then transaction signing needs to be done by the software running on the device, and the shared key stored on the flash memory as regular data. Then, how is it protected from being lifted by malware?

My understanding is that SE (Secure Element) will be embedded as HW as secure storage on device. This is where the key should be stored and updated.Regular Apps wont have access to it. Communication will happen via protected APIs .

I believe even if attackers get their hands on keys, it won't be useful for them, because the dynamic cryptogram is transaction-specific and carries transaction data and it's simply not possible to keep track of a user and follow him/her on every purchase he/she makes. Moreover, the cryptogram contains information that helps card brands realize that it's coming from the specific device which is the original device and it's hard to replicate that for an attacker.

Kind of irritated that you need an external device to make this work (with no info on how to get one) which defeats the all in one aspects of the Clover - and only having the clover for 2 months it is already outdated and i am on a 3 year lease. Will there be other tap pay options besides Apple Pay?

I wonder How can the device (Apple phone) get the token from Payment Gateway. For example, I think that it needs a device account number (device ID) and Authentication by the Payment Gateway to get a token. Is there any person who have some information about that? Thanks

I am working on Android Project in which I have to fetch data from Apple Pay(iPhone) through NFC in Android application. How can I start it in my android application? Please help if anybody have ever gone through such problems.

Apple Trade In AppleShark is one of the best places to sell your iPhone or other Apple device. It doesn't matter if your iPhone is old, has a cracked screen, or wont turn on. If you have an iphone to sell, appleshark will make you a competitive offer. When you have an Apple product that you want to get rid of, you have two choices: you can sell or recycle. As a re-commerce service, appleshark specializes in buying Apple products you don't want anymore. You can sell your iPhone, iPad, iPod, Mac Apple TV, or virtually any other Apple device that you can name.

This is a good site to spend time on; I just stumbled upon your informative blog and wanted to say that I have really enjoyed reading your very well written blog posts. I will be your frequent visitor, thats for sure.

Good Post! Like it, In future reference i really bookmark your blog! Thank you so much for sharing this one NFC App such a Great concept for work in this field, Thanks again all Kind of peaceful info,Love it- NFC App Development

Free Parking Software for Town Houses, Condominiums, and Businesses Solves Parking ProblemsSearching for a parking space is such as frustrating routine activity for lots of people in cities all over the world. This search is burning over a million barrels of oil of the world each day. There are also 4-parking spaces every vehicle in the US and almost all streets are most of the time, empty, which leads to urban environments that are ironically doing far more to accommodate the vehicles than people. As the global population continuously urbanize, without a convenience-driven and well-planned retreat from cars, these sort of parking problems will worsen.http://webparkingsoftware.com software is the first step in the right decision. It involves using low-cost sensors, mobile phone-enabled, and real time data collection automated payment systems enabling people to reserve parking in advance or predict accurately where they can find a spot. When deployed as a system, free parking software thereby reduces car emissions in the urban centers by means of reducing the necessity for the people to circle the city blocks needlessly searching for parking. Furthermore, it permits the cities to manage their parking supply carefully.This free parking software is now being developed in many different states and cities around the United States and some other countries. For instance, in LA, smart meters and low-power sensors are tracking the occupancy of parking spaces across the Hollywood district, one of the most congested areas. The users will be able to access this occupancy data in order to determine the availability of the spots and then pay for them with their mobile phones. Other than the environmental benefits and lending convenience, free parking software is improving the utilization of the current parking, which lead to greater revenue for parking owners. These programs will be able to make great differences on a neighborhood level, but more widespread development and deployment is necessary for free parking software to change the cities and to contribute to the transportation sector pollution reductions greenhouse gas. One problem is that there are no citywide solutions all over the fragmented private and public parking providers. The occupancy data has a tendency to have many owners and is not accessible or standardized in a way that may enable software developers to turn into user-friendly applications. Thereby, individual smart parking efforts are so far successful locally, but uncoordinated, and operates in their own entrepreneurial or bureaucratic vacuums without a need to take gap between current free parking software and more widespread transportation system planning is an enormous missed opportunity for the cities to reduce the transportation related emissions. Moreover, free parking software has been hindered by a lack of insight into the complete benefits of this software, specifically when compared to the cost of building extra parking spaces. Lack of collaboration between communities with the parking software programs, as well as lack of coordination between hardware providers, municipalities, and developers is also contributing to the slower adoption of smart parking. Nevertheless, it is possible to overcome all these issues. Cities will be able further accelerate these advantages by means of updating the land use and building codes policies to reflect the reduced need for parking.

Mobile Jugaad is really fast way to buy & sell used mobiles. I posted add to sell my used mobile and the next hour I started getting response from buyers I was really shocked. We are dealing in Used Mobiles, used Mobiles online, Buy Second Hand Mobile Phones, Sell Second Hand Mobile Phones, Sell Used Mobile Phones, Buy Used Mobile Phones, Used Mobile Phones and Second Hand Mobiles.

I am impressed from your quality of work. Your data is clean and good skilled. You have perfect solution and contents are really interactive. Thank you for your submission. Thanks dear man. kmspico activator

This is very nice article that gives in depth information. Thanks for sharing it. It is extremely valuable information for all. I will recommend my friends to read this for sureIf you love gaming for unity games kindly visit…. mobile app & game development

very informative and detail account. certainly it would be very helpful for the readers. this sort of effort invariably needs feed back and must be encouraged with a lot of appreciations and bundle of thanks. Thanks for sharing it. Keep it Up! winzip activation code

All my thanks to clover-developers.blogspot.com for its amazing idea sharing. Emv stadarization card or emv recognized card is a better method to protect any electronic transaction. EMV global solution provide all type of electronic transaction secure and safe formula so that you do not need to take any extra measure and pain about your transaction. emv global solution

world-wide-web development can be highly popular for the industry due for its various advantages. several companies tend to be looking for secure, speedy, compatible world-wide-web development ios applications development

Sean Callagy & Callagy Law team has won Two, 27 million dollar verdicts in 2 years. The firm focuses on litigation, medical revenue recovery, & family law in New Jersey, New York and Arizona. You can contact any time site: http://www.callagylaw.com

Excellent .. Amazing .. I’ll bookmark your blog and take the feeds also…I’m happy to find so many useful info here in the post, we need work out more techniques in this regard, thanks for sharing. Clovis1stCredit

Systems has its state-of-the-art demo cum training academy at Bengaluru. This academy aims to bring the highest level of manufacturer training to the industry, to improve product knowledge and competency.

Google announces plans to ban ads from so-called payday lenders, in a move the company hopes will limit what it calls a "harmful"... BBC News Google bans ads from payday lenders 11 May 2016 From the section Business Image copyright Getty Images Google has announcedpayday loans online

Subsequently, after spending many hours on the internet at last We\'ve uncovered an individual that definitely does know what they are discussing many thanks a great deal wonderful post.instant connect

Share products online with awesome people nearby and earn money easily through mutterfly, online rental portable now available in Google play storehttps://play.google.com/store/apps/details?id=com.skcsllp.mutterfly&hl=en

Invite people and Make New Friends. Share your Thoughts & Moments, Chat, Listen Music and Play Games. Find any Business, Follow the Shop and Enjoy a New Shopping Experience. Offers, Discounts and Earn Rewards and Much more.

Resources, time to plug and experience ar continuously top-of-mind among IT professionals. thus ar the challenges of adapting sophisticated and inheritance infrastructures in order that they will support the new technologies and devices that interact payments from smartphones and alternative mobile devices. Mobile in operation systems, devices, knowledge streams and payment technologies will modification and evolve each few months, raising the bar for IT departments to adapt and modernize even as quickly. IT professionals should work out the simplest ways in which to remain in correct with new innovations – albeit they're not leading it. Their focus ought to air internal mobile experience and third-party mobile-first vendors World Health Organization will speed time to plug for sophisticated payment comes. Solutions may exist plug-and-play business solutions, self-service platforms, SDKs and genus Apis that ease the burden on internal divisions, and reportage capabilities that facilitate IT monitor results and track growth.

Maybe it's just me but I'm not drinking the cool aid about apple pay in today's announcement. Aside, I really hated the fact that to watch the event you had to use a Safari browser, same with watching Swift tutorial videos on their website, using latest Chrome on a Mac.

I also want to share with you a best Medical Website Design company - OptiMized360 is the #1 healthcare web design firm in the U.S

Are you tired of seeking loans and mortgages from banks? Have you been turned down constantly by your banks and other financial institutions due to bad credit? Are you about loosing your home due to financial constraints? Global Lenders Inc is here to set you free from debt. For immediate enquires you can contact us via email powerfinance7@gmail.com

Illusion Groups is the only company in the world, which can provide you free mobile game app development service. They are known to promote startups and small businesses, you can visit them here - http://www.illusiongroups.com/free-mobile-application-development/

I have to say that i didn't know that apple pay is that effective to developers, this post makes it easy to understand all about that. C.V restructuring assistance You know how to engage your audience and make them understand your message.

It is very meaningful one and it is very useful.This is a good site to spend time on; I just stumbled upon your informative blog and wanted to say that I have really enjoyed reading your very well written blog posts.We are also providing that type of sevicesclick belowMacbook Service center

Get instant support to reduce the error that coming with your MacBook OS as well as hardware and software, we are available MacBook Support Number 1800 501 2708 also we are the same if you are looking for MacBook Air Support Number or IMac Support Number.

Wow, I have never looked at this matter using the approach of the writer and I have gained a lot of new insights and information. This article has really been of useful to me and I hope the author will keep us continually updated with new information. In case you need more interesting and creatively written articles, click on Thesis Finishing and hire professional writers.

The blog or and best that is extremely useful to keep I can share the ideas of the future as this is really what I was looking for, I am very comfortable and pleased to come here. Thank you very much.tanki online | 2048 game|

Apple Pay market share will be growing as long as iPhone platform increase its market share. If you are looking for a website design marketing firm to implement the apple pay functions for your Mobile app or device contact Search Engine Projects, Orange County SEO Firm.

Nice information...you blog...Our Apple Mac Technical Support Services provides solution of every Apple device problem affecting the performance of your Mac device. Contact now at 1800-723-4210 and get uninterrupted online support to fix all the issues for your Apple device.

This blog is having the general information. Got a creative work and this is very different one.We have to develop our creativity mind.This blog helps for this. Thank you for this blog. This is very interesting and useful. Mobile Application Development Company

Nice information...you blog...Our Apple Mac Technical Support Services provides solution of every Apple device problem affecting the performance of your Mac device. Contact now at 1800-723-4210 and get uninterrupted online support to fix all the issues for your Apple device.

It is great to know How Apple Pay works and why it matters for developers, and at this juncture i think i can also start thinking about becoming a developer. This post have been written in a very nice manner, its great and inspirational. Analyzing quantitative Data What an informative post.

May I simply just say what a relief to discover someone that actually knows what they are talking about online. You actually know how to bring an issue to light and make it important. A lot more people ought to look at this and understand this side of the story. It's surprising you aren't more popular given that you definitely possess the gift.game guardian apk downloaddownload game guardian apk

very nice blogs!!! i have to learning for lot of information for this sites...Sharing for wonderful information about the web design and web development.Thanks for sharing this valuable information to our vision. You have posted a trust worthy blog keep sharing.Hire iPhone Developers Indiaihire iphone app developers

My name is Asha from USA am using this medium to publicize goldencrosscredits@outlook.com .I was in a terrible situation sometime last year. We urgently needed to get a new house, my credit score was really bad. We tried all we could to get a loan but all effort was in vain due to the bad credit ,i was surfing on-line and saw a post about this company and how they help fix bad credit and assist you in attaining great financial stability. I made contact and i was asked for a few details which i provided and in less than 5 days i had a reasonable amount of money in my account and am glad today that i was able to get the house we wanted in a short period of time. Are you in need of money or you also have a bad credit or even worse then waste no time but contact goldencrosscredits@outlook.com or +1 240 892 4311